From 74299cc917244ede3bb1cf87345123e898c73a12 Mon Sep 17 00:00:00 2001 From: Eric Garver Date: Thu, 27 Feb 2020 08:45:36 -0500 Subject: [PATCH 151/154] test: more coverage for ipv6 addresses with brackets This covers other features: zone source, forward ports, rich rule source/destination. (cherry picked from commit 229a6f3c21f3b1ce8c3759c3ead65e750e31dd32) (cherry picked from commit 9c480863fca64923aafa8483f7603b9b14c0a0e0) --- src/tests/regression/rhbz1779835.at | 17 ++++++++++++++++- 1 file changed, 16 insertions(+), 1 deletion(-) diff --git a/src/tests/regression/rhbz1779835.at b/src/tests/regression/rhbz1779835.at index 2662271eb459..37d1afc990ab 100644 --- a/src/tests/regression/rhbz1779835.at +++ b/src/tests/regression/rhbz1779835.at @@ -1,5 +1,5 @@ FWD_START_TEST([ipv6 address with brackets]) -AT_KEYWORDS(rhbz1779835 ipset) +AT_KEYWORDS(rhbz1779835 ipset zone forward_port rich) dnl ipset FWD_CHECK([-q --permanent --new-ipset=foobar --type=hash:ip --family=inet6]) @@ -8,4 +8,19 @@ FWD_CHECK([-q --permanent --new-ipset=foobar2 --type=hash:net --family=inet6]) FWD_CHECK([[-q --permanent --ipset foobar2 --add-entry='[1234::]/64']]) FWD_RELOAD +dnl zone source +FWD_CHECK([[-q --zone internal --add-source='[::1234]']]) +FWD_CHECK([[-q --zone internal --add-source='[1234::]/64']]) + +dnl forward ports +FWD_CHECK([[-q --zone internal --add-forward-port=port=1234:proto=tcp:toport=4321:toaddr=[::1234]]]) +FWD_CHECK([[-q --zone internal --add-rich-rule='rule family=ipv6 source address=[::4321] forward-port port="1234" protocol=tcp to-port="4321" to-addr="[::1234]"']]) +FWD_CHECK([[-q --zone internal --add-rich-rule='rule family=ipv6 source address=[1234::]/64 forward-port port="1234" protocol=tcp to-port="4321" to-addr="[::1234]"']]) + +dnl rich rule source/destination +FWD_CHECK([[-q --zone internal --add-rich-rule='rule family=ipv6 source address=[::4321] accept']]) +FWD_CHECK([[-q --zone internal --add-rich-rule='rule family=ipv6 source address=[1234::]/64 accept']]) +FWD_CHECK([[-q --zone internal --add-rich-rule='rule family=ipv6 destination address=[::4321] accept']]) +FWD_CHECK([[-q --zone internal --add-rich-rule='rule family=ipv6 destination address=[1234::]/64 accept']]) + FWD_END_TEST -- 2.25.2